The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data.
A compromised account allowed attackers to breach the French Soccer Federation (FFF), stealing data belonging to its members. The organization confirmed the cyberattack on Thursday, but did not disclose the number of members impacted.
“The FFF reports that the software used by clubs for their administrative management, and in particular that of their members, has been the victim of a cyberattack and data theft.” reads the data breach notice.
“Upon detection of this unauthorized access through the use of a compromised account, the FFF services took the necessary steps to secure the software and data, including immediately disabling the account in question and resetting all user account passwords.”
The federation stated that the issue was resolved following the discovery of unauthorized access.
The French Soccer Federation detected unauthorized access via a compromised account and immediately secured its systems by disabling the account and resetting all passwords. The organization filed a complaint and ANSSI and CNIL. The FFF will inform all individuals whose emails were in the database. The breach exposed only limited data, including name, surname, gender, birth details, nationality, postal address, email, phone number, and license number.
The FFF advises members to be careful with strange messages that look like they come from the FFF or their club, especially if they ask you to open files or share passwords or banking details.
“The FFF is committed to protecting all the data entrusted to it and is constantly strengthening and adapting its security measures in order to cope, like many other actors, with the increasing number and new forms of cyberattacks.” concludes the notice.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, FFF)
